Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: cNN/dN7KqJz67Gag/8xTvNnNznXN+d+xCJPHchZXpWU=
Subject key identifier: 85:20:83:F1:F4:AF:1D:2A:05:DA:AF:8C:E0:4B:9B:B5:16:01:BA:5C
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 01A0C39FD1A328E7F605FC36D249BEAAD565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 11:00:26 +0000
Manifest this update: Mon 21 Sep 2026 11:00:26 +0000
Manifest next update: Tue 22 Sep 2026 11:00:26 +0000
Files and hashes: 1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: eYJtYIKS4M/IDb6v/d/gbXbM+8VBgkjfx115qZnt588=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:d1:a3:28:e7:f6:05:fc:36:d2:49:be:aa:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Sep 21 11:00:26 2026 GMT
Not After : Sep 22 11:00:26 2026 GMT
Subject: CN=852083f1f4af1d2a05daaf8ce04b9bb51601ba5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:c5:4d:96:b7:e8:12:3e:52:e2:59:4a:e7:
f5:d9:27:3f:a2:6a:0d:bd:26:ef:01:bf:70:2c:07:
a1:4e:b3:cf:18:01:f4:95:52:fb:71:60:6b:10:d7:
b6:12:cf:d0:c6:92:f0:09:da:ef:1f:ce:1e:62:af:
11:6f:a3:c4:bd:bf:1b:07:9b:74:0b:92:13:9d:6a:
da:7f:8c:00:02:ee:7c:b9:44:b5:f8:9f:be:47:c7:
0b:dd:9e:e2:d2:47:3d:5e:f3:d0:d7:5a:d7:3e:d0:
7f:d1:0c:6c:bf:ca:b8:0f:37:90:7c:75:1d:4c:3d:
f9:7a:9b:ca:c7:f2:f8:e9:35:70:a8:2f:62:62:05:
e9:e5:b8:e0:b9:62:18:e0:22:4c:35:d4:fc:b5:18:
16:2f:c3:77:e4:d2:1d:68:45:58:0b:51:f1:96:bd:
de:d4:0e:d8:b6:62:63:05:44:eb:6f:a9:63:bf:9d:
77:4f:10:fe:d2:3e:11:83:79:6f:2b:78:19:40:95:
38:31:fe:2b:f1:9a:ed:8d:3a:18:c9:b0:bd:85:24:
ee:49:d9:77:49:b5:c1:b2:84:f0:c5:24:22:b6:c2:
43:2b:fc:d0:ef:73:7e:12:78:f1:85:65:b8:82:7f:
ca:ae:d5:09:68:af:f3:2a:ae:21:df:1d:41:e6:90:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:83:F1:F4:AF:1D:2A:05:DA:AF:8C:E0:4B:9B:B5:16:01:BA:5C
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:11:e9:f0:6f:f7:cd:34:98:ba:dc:ab:f9:b2:aa:09:18:46:
7b:fd:e1:08:88:34:a9:f4:bb:23:e5:ea:34:13:ae:d1:5e:66:
46:99:26:d3:be:5c:f6:e1:e7:4a:e8:eb:c4:b7:15:4c:ef:23:
42:5e:09:12:da:6d:b9:3b:08:03:08:e2:a2:32:fd:bf:a0:02:
e1:52:64:53:3e:e4:63:56:71:26:12:e8:2c:c3:1d:dc:87:83:
5e:c5:30:74:84:ca:b7:38:b9:50:20:47:8c:2e:5f:66:14:f8:
ca:38:68:3f:d3:d0:c0:64:38:23:4c:41:31:f1:6b:14:eb:51:
4e:2f:07:0d:3d:f3:db:d0:b1:d2:f5:30:70:a2:37:c3:f7:f5:
b0:9b:da:84:77:7d:dd:1c:d3:4a:78:1b:eb:c3:b6:eb:88:12:
97:1d:6f:6e:4a:0e:f4:c1:02:a7:65:33:c9:ff:05:9b:72:6d:
80:28:68:b4:2b:f0:dd:fb:ed:ad:25:f5:31:6b:93:71:fe:4e:
31:9a:e8:01:63:55:59:91:03:80:f1:f1:a3:ed:df:04:02:3f:
1b:7f:02:84:30:26:42:1f:cb:21:f9:b6:6a:e2:b6:7f:81:8c:
20:6f:78:31:2c:d4:51:cf:45:df:02:5b:cc:3f:be:57:47:8a:
2d:84:d0:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn9GjKOf2Bfw20km+qtVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj
MDRmNjAwHhcNMjYwOTIxMTEwMDI2WhcNMjYwOTIyMTEwMDI2WjAzMTEwLwYDVQQD
Eyg4NTIwODNmMWY0YWYxZDJhMDVkYWFmOGNlMDRiOWJiNTE2MDFiYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDPFTZa36BI+UuJZSuf12Sc/omoN
vSbvAb9wLAehTrPPGAH0lVL7cWBrENe2Es/QxpLwCdrvH84eYq8Rb6PEvb8bB5t0
C5ITnWraf4wAAu58uUS1+J++R8cL3Z7i0kc9XvPQ11rXPtB/0Qxsv8q4DzeQfHUd
TD35epvKx/L46TVwqC9iYgXp5bjguWIY4CJMNdT8tRgWL8N35NIdaEVYC1Hxlr3e
1A7YtmJjBUTrb6ljv513TxD+0j4Rg3lvK3gZQJU4Mf4r8ZrtjToYybC9hSTuSdl3
SbXBsoTwxSQitsJDK/zQ73N+EnjxhWW4gn/KrtUJaK/zKq4h3x1B5pAP0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUgg/H0rx0qBdqvjOBLm7UWAbpcMB8GA1UdIwQY
MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt
NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh
LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohHp8G/3
zTSYutyr+bKqCRhGe/3hCIg0qfS7I+XqNBOu0V5mRpkm075c9uHnSujrxLcVTO8j
Ql4JEtptuTsIAwjiojL9v6AC4VJkUz7kY1ZxJhLoLMMd3IeDXsUwdITKtzi5UCBH
jC5fZhT4yjhoP9PQwGQ4I0xBMfFrFOtRTi8HDT3z29Cx0vUwcKI3w/f1sJvahHd9
3RzTSngb68O264gSlx1vbkoO9MECp2Uzyf8Fm3JtgChotCvw3fvtrSX1MWuTcf5O
MZroAWNVWZEDgPHxo+3fBAI/G38ChDAmQh/LIfm2auK2f4GMIG94MSzUUc9F3wJb
zD++V0eKLYTQTA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:44 2026 by rpki-client